Skip to content

Conversation

@bsweger
Copy link
Contributor

@bsweger bsweger commented Apr 1, 2025

Closes #15

This PR can be reviewed commit by commit and does the following:

  • Add CODEOWNERS to monitor GitHub workflow updates
  • Set up Dependabot to flag updates to GitHub actions
  • Pin 3rd party GitHub actions via commit SHA
  • Add explicit permissions to workflows
  • Update pkgdown-pr-preview to to the most recent hubverse-developer-actions version

In addition to the changes in this PR, an admin of this repo should update the CodeQL scanning rulesets as documented here: https://hubverse.io/en/latest/developer/security.html#codeql-settings

bsweger added 5 commits April 1, 2025 14:11
This file ensures that updates to workflow-related files will be reviewed by
at least one member of the hubverse-developers team
Instruct dependabot to check for updates to GitHub actions and submit
a pull request to bump the versions
@bsweger bsweger requested a review from lshandross April 1, 2025 18:27
@github-actions
Copy link

github-actions bot commented Apr 1, 2025

Copy link
Contributor

@zkamvar zkamvar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you, @bsweger!

@bsweger bsweger merged commit a3b3407 into main Apr 2, 2025
5 checks passed
@bsweger bsweger deleted the bs/add-security-updates/15 branch April 2, 2025 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Resolve code scanning issues in hubCI

3 participants